12423 matches found
creepy-plugins
creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...
CVE-2020-0014-Toast
CVE-2020-0014 Toast Reproduction This vulnerability allows a malicious app to intercept user operations on the screen by constructing a clickable Toast view, thereby achieving the purpose of collecting sensitive information such as user passwords. Affected versions: Android 8.0, 8.1, 9, 10 Only...
burp_global_match_replace
Global Match & Replace GMR Burp Suite Extension Global Match & Replace GMR extends Burp Suite with match/replace rules to apply globally or across multiple tools of your choice Repeater, Intruder, Proxy, etc.. It provides per-request and response diffs so you can see exactly what changed. This...
idaguides
IDA Guides Small plugin for IDA that adds indent guides to the decompiler view. Installation 1. Clone or download this repository 2. Extract it's contents to your IDA plugins directory 3. Restart IDA Tested With IDA 9.2, 9.3...
Netryx-Astra-V2-Geolocation-Tool
Netryx Astra V2 State-of-the-art AI geolocation from a single image. The Idea • How It Works • Getting Started • Community Hub • Installation The Idea You have a photograph. Maybe it's a screenshot from a video. Maybe it's a cropped, blurry phone photo someone posted online. Maybe it shows just a...
sparrow-wifi
Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...
bytesrevealer
https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Version: 0.4 Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string...
CVE-2019-5418
CVE-2019-5418 - File Content Disclosure on Rails EDIT : this CVE can lead to a Remote Code Execution, more info: https://github.com/mpgn/Rails-doubletap-RCE There is a possible file content disclosure vulnerability in Action View. Specially crafted accept headers in combination with calls to rend...
SPiCa
SPiCa System Process Integrity & Cross-view Analysis "I'm going to sing, so shine bright, SPiCa..." SPiCa is an eBPF-based Linux rootkit detector written in Rust. The name comes from the Hatsune Miku song SPiCa and the star it references — Spica Alpha Virginis, the brightest point in Virgo. What...
Netryx-OpenSource-Next-Gen-Street-Level-Geolocation
NETRYX Open-Source Street-Level Geolocation Engine Upload any street photo. Get precise GPS coordinates. Sub-50m accuracy. No landmarks needed. Runs entirely on your hardware. Demos · How It Works · Getting Started · Usage · FAQ THIS VERSION IS OLD, USE THIS INSTEAD NEW REPO What is Netryx? Netry...
CVE-2021-21978
CVE-2021-21978 CVE-2021-21978 EXP VMware View Planner RCE CVE-2021-21978 Reverse shell...
CVE-2022-31101
CVE-2022-31101 Exploit for PrestaShop bockwishlist module 2.1.0 SQLi CVE-2022-31101 Usage python3 cve-2022-31101.py Give the url to the wishlist when prompted. Example of a url: http://example.com/module/blockwishlist/view?idwishlist=1 Give the cookies for your account when prompted. Now it will...
CVE-2024-45058
CVE-2024-45058 PoC for CVE-2024-45058 Broken Access Control, allowing any user with view permission in the user configuration section to become an administrator changing their own user type. Grab the desired nivelusuario ID and run the exploit. Usage root@kitploit: usage: CVE-2024-45058.py -h -t...
https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the MonikerLink bug, this vulnerability has...
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the MonikerLink bug, this vulnerability has...
CVE-2021-3129
CVE-2021-3129 Laravel 디버그 RCE 사용 방법 docker-compse up -d를 실행하여 환경을 시작합니다 8888 포트에 접속한 후 홈페이지의 generate key를 클릭하면 재현할 수 있습니다 Docker 환경에 대해 몇 가지 말씀드리자면: .env.example을 .env로 복사하여 디버그 환경을 활성화합니다 php.ini의 phar.readonly를 비활성화했습니다 resources/view/에 hello 템플릿을 추가하고 정의되지 않은 변수를 참조했으며, 동시에 routes/web.php에 라우...
CVE-2026-90544
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the videoAddViewCount.json.php endpoint before updating view statistics. Authenticated attackers with low privileges can increment view counts and watch-time on videos they cannot acc...
EUVD-2026-76862
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the videoAddViewCount.json.php endpoint before updating view statistics. Authenticated attackers can increment view counts and watch-time on videos they cannot access by submitting...
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
Microsoft Outlook 원격 코드 실행 취약점 PoC 이 스크립트는 CVE-2024-21413에 대한 개념 증명PoC을 보여줍니다. 이는 Microsoft Outlook에서 식별된 CVSS 점수 9.8의 치명적인 보안 결함입니다. MonikerLink 익스플로잇이라 불리는 이 취약점은 로컬 NTLM 데이터의 잠재적 유출과 원격 코드 실행 위험과 같은 광범위한 결과를 초래합니다. 또한, 이 취약점은 Office 보호 보기를 우회할 수 있는 공격 벡터를 강조하여 추가 Office 소프트웨어에 위협을 확장합니다. 사용 방법...
bytesrevealer
https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Версия: 0.4 Bytes Revealer — это мощный инструмент для реверс-инжиниринга и анализа бинарных файлов, предназначенный для исследователей безопасности, специалистов по криминалистике и разработчиков. Благодаря таким функция...